Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416.cer
File:                     fa5ebc0b-1665-43a2-aa74-ae198d605416.cer (raw, json)
Hash identifier:          noawLcyR9GQKy2DAsRYzFGeW0HLgjGs1CvgSIQX6SSU=
Subject key identifier:   15:8E:19:16:B4:A7:32:B7:4D:B4:0C:50:55:3D:BE:46:58:25:D0:80
Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA
Certificate issuer:       /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
Certificate serial:       010D0C9F43285845ADE6809F64E6D45253765480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/fa5ebc0b-1665-43a2-aa74-ae198d605416.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sat 27 Apr 2024 00:45:21 +0000
Certificate not after:    Fri 31 Jul 2026 00:45:21 +0000
Subordinate resources:    AS: 32343

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ad:e6:80:9f:64:e6:d4:52:53:76:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29
        Validity
            Not Before: Apr 27 00:45:21 2024 GMT
            Not After : Jul 31 00:45:21 2026 GMT
        Subject: CN=fa5ebc0b-1665-43a2-aa74-ae198d605416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:17:2a:81:39:b3:94:05:c5:6c:2f:7e:07:
                    9e:a9:6d:ee:74:37:c2:0c:5c:fe:ee:2e:71:43:2c:
                    62:74:e7:df:6f:97:6d:71:e8:38:57:89:a4:6a:b3:
                    a1:b1:ea:6b:9b:fe:2f:5f:ad:0a:65:6a:85:a5:6c:
                    4d:c1:37:50:60:27:69:2b:df:a1:22:64:0f:d2:ff:
                    d1:58:42:88:d9:0e:6a:ed:25:aa:30:8b:8e:fa:00:
                    a8:25:64:b7:a9:88:93:63:d6:75:6b:f1:58:d0:21:
                    45:9c:4e:35:2a:8c:6b:43:2d:24:5a:cf:fa:92:aa:
                    8c:82:3a:fe:b7:23:bc:57:11:68:76:38:3f:de:3d:
                    6b:55:6d:29:eb:0b:00:b9:3f:fd:e7:7d:65:1f:16:
                    c4:51:08:3f:51:5d:84:32:0f:10:25:d3:8d:e7:44:
                    47:2d:88:70:6f:e0:8c:61:d6:3c:c7:bb:2f:1b:b3:
                    37:3b:a7:6e:ac:b3:83:bf:cc:eb:21:ef:1f:83:1e:
                    a9:27:ef:c5:9b:12:5b:79:86:1d:ec:92:c7:49:29:
                    97:da:ca:95:31:80:5c:6a:74:6a:8b:b3:52:25:ba:
                    70:3f:4b:c8:e9:bf:0f:f0:05:a6:39:04:45:e2:61:
                    31:e3:10:ed:f2:3b:43:41:92:83:c9:e2:04:b3:00:
                    fb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8E:19:16:B4:A7:32:B7:4D:B4:0C:50:55:3D:BE:46:58:25:D0:80
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fa5ebc0b-1665-43a2-aa74-ae198d605416/fa5ebc0b-1665-43a2-aa74-ae198d605416.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl

            X509v3 Authority Key Identifier:
                keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  32343

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:0d:76:8e:25:82:4f:f9:75:34:bf:95:0e:77:21:e6:44:
         d5:80:a6:10:2d:2d:b3:db:71:a8:de:e5:31:56:99:7d:e8:f6:
         b5:ea:3d:22:2a:69:32:98:9e:10:de:ec:26:27:0a:34:fc:3f:
         9c:c2:fc:ac:05:81:41:d9:10:c2:7f:20:7c:5a:19:6d:98:80:
         9b:2c:03:f2:f9:f2:2d:01:cc:0d:56:6d:45:b0:7e:b5:8e:87:
         97:14:22:72:b8:8c:e5:39:57:42:76:51:00:d8:76:1b:50:2b:
         7b:d6:3c:78:31:aa:30:01:c8:84:25:9c:a5:81:bb:1c:52:d7:
         5f:9f:26:34:fe:4f:43:4d:a6:0d:6a:d1:ac:28:89:48:da:8a:
         b8:0a:3f:bd:63:a6:de:b5:ef:b0:ce:88:ae:92:c0:38:ec:aa:
         a1:97:9c:27:93:40:56:e2:28:32:fe:48:6d:bf:9a:44:0f:43:
         76:c2:d7:92:40:cb:90:61:5a:5d:be:56:db:1f:1a:50:60:05:
         a3:f9:b1:bc:1c:d1:f4:e1:3f:94:c2:89:2f:99:4d:f0:ca:33:
         d1:e1:19:d7:52:a9:cf:05:fc:37:c3:ad:73:cb:08:94:fd:aa:
         3b:b5:e1:9d:d1:e7:ce:5b:05:51:85:b8:20:5b:28:0c:82:6e:
         58:f9:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----